PXE Boot basic overview

Server prerequisites: Windows Server; DHPC server automatically assigning IP addresses (ensure Options 66 and 67 are set properly); TFTP server for boot images; network switches/routers for PXE boot traffic.

Client prerequisites: Ensure the network interface card (NIC) supports PXE booting; enable network boot in BIOS/UEFI, with priority set to network booting,

Process flow:

On client startup, the computer will request the following through the network card:

  1. A network IP address
  2. A TFTP server address, in order to pull the initial boot file instructions
  3. Bootfile (NBP – Network Bootstrap Program) download, which may be a minimal loader or script for imaging
  4. The bootfile can initiate the OS install, additional scripts, or connection to a management console.

Network security settings: Firewall setting may need to be updated to allow DHCP and TFTP traffic. The PXE boot environment may need to be updated for enhanced security. Tightening up security may involve isolating PXE traffic in its own VLAN; UEFI Secure Boot should be use if/when possible; MAC filters could be applied; updating the DHCP server Access Control List.

Create a website or blog at WordPress.com

Up ↑